aaahhhh, finally somebody's understanding my question. the reason i am asking this: the watchguard firewall is linux based. they have a configuration which is called "drop-in". all three interfaces get the same ip plus one or more virtuell ips. the ipchains programmer is paid by watchguard (see howto). i dont think that they use ipchains for there rules, but i asked my self if this is possible with ipchains on a standard distro. i dont like these "all-in-one" solutions, they are not very flexible. but i like the idea of saving some ips. by, jb -----Ursprüngliche Nachricht----- Von: Roman Drahtmueller [mailto:draht@suse.de] Gesendet: Donnerstag, 2. November 2000 12:09 An: Kurt Seifried Cc: suse-security@suse.com Betreff: Re: [suse-security] same ip for two interfaces The whole thing is interesting from the academic standpoint. What would happen with two interfaces of the same IP? Roman. -- - - | Roman Drahtmüller // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - - --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com